This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343030303a3a2f34302d3438203d3e20323733303732.roa File: 323830333a636639303a343030303a3a2f34302d3438203d3e20323733303732.roa (raw, json) Hash identifier: BVs83feNMdFoS1vryvzixvA6QQB3w7P6RnQYyz65y4c= Subject key identifier: 4E:D6:78:61:4F:D5:98:26:69:1D:5D:33:B6:C2:0B:00:23:9B:B3:31 Certificate issuer: /CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Certificate serial: 25EDDD392B46BD9CC33362DA2D52B4E126373210 Authority key identifier: 92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343030303a3a2f34302d3438203d3e20323733303732.roa Signing time: Tue 06 Jan 2026 20:49:15 +0000 ROA not before: Tue 06 Jan 2026 20:44:15 +0000 ROA not after: Tue 05 Jan 2027 20:49:15 +0000 asID: 273072 IP address blocks: 2803:cf90:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Jan 2026 11:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ed:dd:39:2b:46:bd:9c:c3:33:62:da:2d:52:b4:e1:26:37:32:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92C6C2DFE47750FF327706EBA1931B93C4D5C41A Validity Not Before: Jan 6 20:44:15 2026 GMT Not After : Jan 5 20:49:15 2027 GMT Subject: CN=4ED678614FD59826691D5D33B6C20B00239BB331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:b6:70:2e:b3:94:92:37:e1:b9:24:5a:97: 59:b6:22:e5:17:3a:0c:32:fd:f8:28:a1:e1:79:f6: 3a:d4:ef:04:8a:62:2f:4e:63:c2:4d:16:14:12:c7: fa:59:8c:6d:80:18:6c:1e:3d:79:35:68:42:8e:4f: c7:b6:90:df:21:1d:2c:48:a9:49:b1:02:83:51:68: 9b:cd:0f:91:6d:8d:f3:ab:a7:ba:ad:fa:db:ad:38: 4f:f4:6e:f9:48:b7:e2:aa:e7:fa:85:a3:af:d8:41: 31:89:90:a2:10:69:8d:1d:6a:0a:8d:46:77:3b:00: 5d:72:bc:f9:8d:39:cb:44:43:e2:b7:5e:e4:b9:da: 39:a1:98:41:b9:2b:97:a1:b2:bd:a5:86:ba:88:8c: 90:69:6f:3d:71:4f:0d:2d:ad:4e:bc:46:05:a8:76: 7a:6b:48:fb:a6:28:90:7e:d2:e1:bf:96:d8:1c:95: 6b:50:bd:82:aa:58:52:2c:fa:ac:16:bd:56:c2:a5: 50:2e:e3:50:3a:bb:1d:58:0c:80:91:8a:47:4a:bc: 81:af:b1:85:ba:73:73:14:5b:c6:7d:70:85:ea:58: a6:51:46:5a:ca:ea:b1:bd:7f:ed:ef:04:15:f4:3a: 23:02:69:b8:bf:4d:24:a9:78:8d:4c:67:8f:dd:f9: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D6:78:61:4F:D5:98:26:69:1D:5D:33:B6:C2:0B:00:23:9B:B3:31 X509v3 Authority Key Identifier: keyid:92:C6:C2:DF:E4:77:50:FF:32:77:06:EB:A1:93:1B:93:C4:D5:C4:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92C6C2DFE47750FF327706EBA1931B93C4D5C41A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E7A5BA354DF4B8F587064F4D3B1CEC521AC15BD50130C289D63D0C91FE2C87A/0/323830333a636639303a343030303a3a2f34302d3438203d3e20323733303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cf90:4000::/40 Signature Algorithm: sha256WithRSAEncryption 58:5c:b8:fa:4b:2f:02:45:15:bd:72:20:9b:1a:1d:ff:ea:0b: 52:c8:69:b0:4b:e3:c6:88:24:68:84:4f:37:fa:00:d1:ea:36: aa:73:95:a8:6f:f7:b2:90:c0:95:04:68:99:61:3b:8a:50:76: c6:d0:fb:36:e3:a6:57:98:e8:84:66:8a:0a:ac:17:64:c4:17: 7d:9a:11:15:41:2e:2a:5d:14:96:e5:0d:25:b9:d1:df:6b:f7: b2:7f:5a:1e:50:f8:62:ca:a0:65:3b:7b:ac:b1:76:59:17:57: 98:6f:e1:f6:04:b1:af:be:60:7c:c0:d2:fc:a2:97:d2:19:f2: 7d:ae:ed:21:4f:f9:98:20:07:33:55:ee:a3:2e:2d:dc:35:e7: 34:f2:f2:26:49:b0:ae:03:45:6d:e4:1e:84:3f:a6:7e:d9:1b: 93:4f:c6:40:cd:90:fe:7b:e0:5c:f3:5e:92:59:99:f8:0d:a3: fc:dd:4b:d3:f2:3a:fc:2b:1b:6b:f4:bb:cd:1a:25:e6:c2:76: 54:56:b1:fe:f5:05:e8:bc:4c:cf:d7:93:30:7b:5d:b8:35:f4: 8f:87:eb:88:74:36:ac:c5:73:37:e7:70:d2:eb:5b:28:a8:c9: 87:70:00:95:6c:7e:37:26:5b:11:f5:29:79:f5:d7:64:b6:81: d9:bf:d5:6b -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUJe3dOStGvZzDM2LaLVK04SY3MhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJDNkMyREZFNDc3NTBGRjMyNzcwNkVCQTE5MzFCOTND NEQ1QzQxQTAeFw0yNjAxMDYyMDQ0MTVaFw0yNzAxMDUyMDQ5MTVaMDMxMTAvBgNV BAMTKDRFRDY3ODYxNEZENTk4MjY2OTFENUQzM0I2QzIwQjAwMjM5QkIzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3bZwLrOUkjfhuSRal1m2IuUX Ogwy/fgooeF59jrU7wSKYi9OY8JNFhQSx/pZjG2AGGwePXk1aEKOT8e2kN8hHSxI qUmxAoNRaJvND5FtjfOrp7qt+tutOE/0bvlIt+Kq5/qFo6/YQTGJkKIQaY0dagqN Rnc7AF1yvPmNOctEQ+K3XuS52jmhmEG5K5ehsr2lhrqIjJBpbz1xTw0trU68RgWo dnprSPumKJB+0uG/ltgclWtQvYKqWFIs+qwWvVbCpVAu41A6ux1YDICRikdKvIGv sYW6c3MUW8Z9cIXqWKZRRlrK6rG9f+3vBBX0OiMCabi/TSSpeI1MZ4/d+V9nAgMB AAGjggLUMIIC0DAdBgNVHQ4EFgQUTtZ4YU/VmCZpHV0ztsILACObszEwHwYDVR0j BBgwFoAUksbC3+R3UP8ydwbroZMbk8TVxBowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTdBNUJBMzU0REY0QjhGNTg3MDY0RjREM0IxQ0VDNTIx QUMxNUJENTAxMzBDMjg5RDYzRDBDOTFGRTJDODdBLzAvOTJDNkMyREZFNDc3NTBG RjMyNzcwNkVCQTE5MzFCOTNDNEQ1QzQxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkM2QzJERkU0Nzc1MEZGMzI3 NzA2RUJBMTkzMUI5M0M0RDVDNDFBLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0U3QTVCQTM1NERGNEI4RjU4NzA2NEY0RDNCMUNFQzUyMUFDMTVCRDUw MTMwQzI4OUQ2M0QwQzkxRkUyQzg3QS8wLzMyMzgzMDMzM2E2MzY2MzkzMDNhMzQz MDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjM3MzMzMDM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAoA8+QQDANBgkqhkiG9w0BAQsFAAOCAQEAWFy4+ksvAkUVvXIgmxod/+oL UshpsEvjxogkaIRPN/oA0eo2qnOVqG/3spDAlQRomWE7ilB2xtD7NuOmV5johGaK CqwXZMQXfZoRFUEuKl0UluUNJbnR32v3sn9aHlD4YsqgZTt7rLF2WRdXmG/h9gSx r75gfMDS/KKX0hnyfa7tIU/5mCAHM1Xuoy4t3DXnNPLyJkmwrgNFbeQehD+mftkb k0/GQM2Q/nvgXPNeklmZ+A2j/N1L0/I6/Csba/S7zRol5sJ2VFax/vUF6LxMz9eT MHtduDX0j4friHQ2rMVzN+dw0utbKKjJh3AAlWx+NyZbEfUpefXXZLaB2b/Vaw== -----END CERTIFICATE-----Generated at Mon Jan 12 16:23:08 2026 by rpki-client